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7) Q Claim(s) is/are objected to. 
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Application Papers 

9) D The specification is objected to by the Examiner. 
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DETAILED ACTION 

1. This Office action is responsive to the following communication: Amendment filed on 18 
December 2006. 

2. Claims 1-34 are pending and present for examination. Claims 1, 16, and 26 are independent. 

Response to Amendment 

3. Claims 1, 5, 16, 19, 26, and 29 have been amended. 

4. Claims 8-9, 22, and 32 have been cancelled. 

5. No claims have been added. 

Claim Rejections - 35 USC § 112 

6. As per the 35 U.S.C. 112 rejections, Applicant's Amendment has been acknowledged. 
Accordingly, the rejection has been withdrawn. 

Claim Rejections - 35 USC § 102 

7. . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use 
or on sale in this country, more than one year prior to the date of application for patent in the United States. 

8. Claims 1-7, 10, 12-13, 15-21, 23, 25-31, and 33-34 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Joshi et al (USPGPUB No. 2002/0091798, hereinafter referred to as JOSHI), filed on 
26 February 2001, and published on 11 July 2002. 
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9. As per independent claims 1, 16 and 26, JOSHI teaches: 

A system for sharing confidential semiconductor manufacturing information comprising: 

an access monitor module for authorizing user access to confidential information {See 
JOSHI, [0196], wherein this reads over "Access Server authentication module 540 then authenticates 
the user using the user ID and password"}; 

an information sharing module for creating a transitory link to the confidential 
information in response to a user being authorized to access the confidential 
information {See JOSHI, [0124], wherein this reads over "[authorization event handler 516 
performs steps in a method for determining whether a user of browser 12 or 14 is authorized to 
access a requested resource upon a successful authentication or receipt of a valid authentication 
cookie"} stored in a database ; and 

a transitory link maintenance module for maintaining the transitory link and 
selectively removing the transitory link from the system {See joshi, [0148], wherein 
this reads over "[o]nce authenticated, a user can explicitly log out, causing authentication cookies 
cached (or otherwise stored) by the user's browser to be destroyed or become invalid"}. 

10. As per dependent claim 2, JOSHI teaches: 

The system of claim 1 wherein the access monitor module monitors user idle time and 
may grant access to the system upon verifying user authorization to access the 
System {See JOSHI, [0209], wherein this reads over "[i]f the time elapsed since the session start time 
exceeds a maximum session time, the cookie will become invalid. Idle start time is also stored, which 
identifies the time when the previous HTTP request for a protected resource was made in which cookie 
was passed. If the time elapsed since the idle start time exceeds a maximum idle time, the cookie will 
become invalid"}. 

11. As per dependent claims 3, 17 and 27, JOSHI teaches: 

The system of claim 2 wherein the access monitor module denies user access to the 
system if the user idle time exceeds an allowable time limit {See joshi, [0148], wherein 
this reads over "[authentication cookies can also be set by an administrator to be destroyed after a 
maximum idle time has elapsed between requests to resources protected in accordance with the present 

invention"}. 

12. As per dependent claims 4, 18 and 28, JOSHI teaches: 

The system of claim 1 wherein the information sharing module determines whether the 
confidential information is information the user is authorized to access and, in 
response to the confidential information being information the user is authorized to 
access, the information sharing module creating the transitory link {See joshi, [Oisi], 
wherein this reads over "the method attempts to determine whether the user is authorized to access the 
requested resource. If the user is authorized (step 790), the method proceeds to step 792 . . . [where] 
the successful authorization of the user is logged in step 792, authorization success actions are performed 
in step 794, and the user is granted access to the requested resource in step 795"}. 

13. As per dependent claims 5, 19 and 29, JOSHI teaches: 

The system of claim 1 further comprising: a user privilege file, whereby the information 
sharing module creates the transitory link when the confidential information 
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corresponds to information contained in the user privilege file {See joshi, [oisi], wherein 
this reads over "the method attempts to determine whether the user is authorized to access the requested 
resource. If the user is authorized (step 790), the method proceeds to step 792 . . . [where] the 
successful authorization of the user is logged in step 792, authorization success actions are performed in 
step 794, and the user is granted access to the requested resource in step 795"; and [0153], wherein this 
reads over "if a successful mapping has occurred (step 838), then Access Server 34 retrieves the 
authentication rule (step 844) and audit rule (step 846) associated with the requested resource"}. 

14. As per dependent claims 6, 20 and 30, JOSHI teaches: 

The system of claim 1 wherein the access monitor module uses cookies to authorize 
access to the confidential information {See JOSHI, [0124], wherein this reads over 
"[authorization even handler 516 performs steps in a method for determining whether a user of browser 
12 or 14 is authorized to access a requested resource upon a successful authentication or receipt of a valid 
authentication cookie"}. 

15. As per dependent claim 7, 21 and 31, JOSHI teaches: 
The system of claim 1 further comprising: 



an information list and request link disconnected from the confidential information, 
whereby upon creation of the transitory link, the information list and request link 
is connected to the confidential information through the transitory link to allow 
for accessing of the confidential information {See joshi, [0i5i], wherein this reads over 
"the method attempts to determine whether the user is authorized to access the requested resource. 
If the user is authorized (step 790), the method proceeds to step 792 . . . [where] the successful 
authorization of the user is logged in step 792, authorization success actions are performed in step 
794, and the user is granted access to the requested resource in step 795"}. 

16. As per dependent claims 10, JOSHI teaches: 



The system of claim 1 wherein the transitory link maintenance module removes the 
transitory link when the system indicates that the confidential information is no 
longer authorized to be accessed {See JOSHI, [0151], wherein this reads over "[otherwise, the . 
unsuccessful authorization is logged in step 796. After step 796, the method performs authorization failure 
actions (step 798) and Web Gate 28 denies the user access to the requested resource"}- 

17. As per dependent claim 12, JOSHI teaches: 

The system of claim 1 further comprising: a network coupled to the system {See joshi, 
[0011], wherein this reads over "an access system that provides data to resources available on a 
network"; and [0080], wherein this reads over "a resource is anything accessible to a user on a network. 
The network could be the Internet, a LAN, a WAN, or any other type of network"}. 

18. As per dependent claim 13, JOSHI teaches: 

The system of claim 1 further comprising: a database coupled to the system {See joshi, 
[0080], wherein this reads over "[a] resource can include a web page, software application, file, 
database"}. 

19. As per dependent claim 15, 25 and 34, JOSHI teaches: 

The system of claim 1 wherein the transitory link is a symbolic link {See joshi, [0226], 
wherein this reads over "the resource determines whether there are any header variables to consider. If 
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there are no header variables, then in step 1834, the resource responds to the request. Responding to the 
request can include providing a web page, access to a software process or anything else appropriate for 
the particular resource. If, in step 1832, it is determined that there are header variables, then in step 1836 
the resource searches for a particular variable name. In order to use header variables, the resource must 
be preprogrammed to know what header variables to expect and how to use them."}. 

20. As per dependent claims 23 and 33, JOSHI teaches: 

The method of claim 12 wherein the removing is performed after the confidential 
information has been accessed through the transitory link {See joshi, [0148], wherein this 
reads over "[authentication cookies can also be set by an administrator to be destroyed after a maximum 
idle time has elapsed between requests to resources protected in accordance with the present invention"}. 



Claim Rejections - 35 USC § 103 

21. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

22. Claims 11, 14 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over JOSHI, 
in view of Official Notice. 

23. As per dependent claims 11 and 24, JOSHI, in combination with Official Notice, discloses a 
system wherein the system exists within a virtual integrated circuit fabrication system since it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to include an access 
authentication system to protect confidential integrated circuit fabrication information. 

24. As per dependent claim 14, JOSHI, in combination with Official Notice, discloses a system 
wherein the access monitor module, the information sharing module, and the transitory link maintenance 
module are all written in the common gateway interface (CGI) since it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to use CGI, a well-known programming 



method, for writing modules of the claimed system. 
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Response to Arguments 

25. Applicant's arguments filed 18 December 2006 have been fully considered but they are not 
persuasive. 

a. Applicant's Arguments: 

i. Rejections under 35 U.S.C, 102 

Applicant asserts the argument that Joshi fails to teach the claim limitation of 
"creating a transitory link to . . . confidential information [stored in the database] in 
response to a user being authorized to access the confidential information" (See 
Amendment, page 8). 

Applicant asserts the argument that Joshi fails to teach the claim limitation of 
"selectively removing the transitory link from the system" (See Amendment, page 8). 

ii. Rejections under 35 U.S.C. 103 

Applicant asserts the argument that the dependent "claims are allowable over 
the cited referenced for at least the same reasons set forth" with reference to claims 1 
and 16 (See Amendment, page 8). 

b. Response to Arguments: 

i. Rejections under 35 U.S.C. 102 

As per Applicant's assertion that Joshi fails to teach the claim limitation of 
"creating a transitory link to . . . confidential information [stored in the database] in 
response to a user being authorized to access the confidential information," the Examiner 
respectfully disagrees. It is noted that Figure 22 and Paragraph [0151] of Joshi's claimed 
invention discloses a process wherein "the user is granted access to the requested 
resource" {See JOSHI, [0151] and Step 795 of Figure 22}. That is, the granting of 
access to the protected resource by means of performing authorization success actions 
would read upon Applicant's claim limitation of "creating a transitory link to . . . 
confidential information." 
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As per Applicant's assertion that Joshi fails to teach the claim limitation of 
"selectively removing the transitory link from the system," the Examiner respectfully 
disagrees. It is noted that the destruction of the authentication cookies would effectively 
remove the transitory link from the system in that the user would no longer have access 
to the requested resource. Furthermore, Applicant's addition of the term "selectively" to 
the claim language fails to overcome the disclosed prior art of Joshi in that Joshi 
discloses a method wherein authentication cookies are destroyed after a maximum idle 
time (i.e. the selection criterion according to which the transitory link is removed). 

Accordingly, the claim rejections under 35 U.S.C. 102 are sustained, 
ii. Rejections under 35 U.S.C. 103 

As per claims 11, 14, and 24, Applicant has not asserted any specific arguments 
in response to the rejections of the claims. Therefore, the rejections of claims 11, 14 
and 24 are sustained because Applicant has not presented any prior art arguments for 
overcoming the rejections contained in the prior Office Action. Furthermore, by virtue of 
dependency, the rejections of Claims 11, 14, and 24 are sustained for the reasons stated 
above in relation to Claims 1 and 16. 

Conclusion 

26. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as set 
forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date 
of this final action and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing 
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date of the advisory action. In no event, however, will the statutory period for reply expire later than SIX 



MONTHS from the mailing date of this final action. 

27. Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Paul Kim whose telephone number is (571) 272-2737. The examiner can normally be 
reached on M-F, 9am - 5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Apu 
Mofiz can be reached on (571) 272-4080. The fax phone number for the organization where this 
application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Paul Kim 

Patent Examiner, Art Unit 2161 yis*-* 
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